This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json) Hash identifier: wPxincGOYQ0+hL0MyzVegoQKxV9XTPUVsfYXBoL0Szk= Subject key identifier: EE:8A:1F:5E:04:B0:F7:94:66:4C:BF:7A:9F:69:A5:65:5D:99:AA:BE Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c Certificate serial: 019C42EB0CBD8E3973769D8B4951CF67BE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft Manifest number: 0491 Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: hUfikffp6qCatn6Jn4dHJqvNgtoEDEfTZ8oAL5OrHsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0c:bd:8e:39:73:76:9d:8b:49:51:cf:67:be:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=ee8a1f5e04b0f794664cbf7a9f69a5655d99aabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:76:45:4e:eb:93:14:d9:fc:de:0c:22:4b: 5d:1a:cd:19:7d:1c:08:30:3d:59:3c:fe:97:ce:22: ab:ac:a7:7e:11:d3:21:9d:a4:a6:03:e9:ba:f3:00: 45:2a:35:b9:88:aa:26:72:b5:26:45:27:c5:60:2a: 6f:dc:31:80:1f:d5:11:ba:d0:1c:49:e2:55:7d:eb: 04:8e:43:ef:cc:98:a9:76:9f:fd:ce:3c:33:2c:00: c3:5d:83:89:54:b1:28:c3:20:18:aa:f5:30:9a:a6: b5:82:e1:84:40:d0:e5:81:b6:f1:3c:67:05:d2:cb: 15:ec:65:46:fd:7b:fe:7e:22:ae:1f:6e:11:67:29: 8a:db:ce:be:00:a0:e2:60:4f:e9:e4:14:72:08:bb: 10:28:65:c3:6d:9f:1b:e2:3b:81:2b:c7:22:e0:1b: 3c:99:5d:f1:0f:31:69:8d:18:61:dc:bf:a7:fa:d4: b5:a7:17:02:67:eb:c2:12:1e:0a:79:8a:1e:4e:f1: 41:d2:0f:d3:dc:da:cf:24:2a:2e:2c:e9:b8:62:c1: ec:4e:bc:33:fe:93:db:3e:d1:6e:e3:e3:35:c7:79: 51:a5:f5:ce:07:a2:70:92:56:43:47:77:bc:6f:3d: 8d:71:95:4d:3c:3d:71:2f:e6:95:49:d3:7e:af:5a: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:1F:5E:04:B0:F7:94:66:4C:BF:7A:9F:69:A5:65:5D:99:AA:BE X509v3 Authority Key Identifier: keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f0:da:1b:22:81:53:f6:bc:5e:0f:1e:c7:f2:d6:6d:1b:c5: ac:e4:2d:06:ae:a9:ec:79:16:c4:cc:1d:44:5d:35:04:49:7e: 02:2b:61:81:4f:9a:5e:55:67:de:d0:8b:41:73:e2:80:c0:ad: c1:ca:09:d4:1d:68:d0:af:71:11:77:e0:b0:43:56:86:74:09: d4:70:9b:c1:eb:ea:b3:17:83:26:f1:b2:01:e5:1a:1c:62:22: 74:de:be:0e:ad:23:27:ed:0a:0c:60:47:99:f3:74:fe:e1:87: 6b:c7:52:2b:31:1b:0a:01:46:3d:7d:fc:2e:3a:68:c7:b5:12: 12:df:b2:61:5a:c9:2a:d7:08:c3:e0:65:3d:5d:f9:42:1f:71: cb:78:93:10:4d:74:4b:8a:cb:35:5f:54:1c:02:90:ce:63:8b: 35:f1:74:eb:29:ad:f9:f7:f4:77:29:a9:2a:91:04:32:13:17: 3b:ba:ef:0f:ce:62:c5:27:79:d3:6f:9a:7b:1d:46:02:16:c5: 39:6e:d9:88:27:24:1d:5b:94:03:b5:f6:db:33:04:e7:6d:d9: 98:b6:ac:7d:cb:aa:ea:f8:9a:88:1f:2b:02:c4:d8:1d:cb:13: d9:29:d8:d4:dd:bb:75:b3:90:63:be:46:78:62:8b:16:3b:5c: e9:14:78:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wy9jjlzdp2LSVHPZ74FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNjFiZmQ0NTBlMTJlOTk1NDA0YTQ0ZWIzN2EyZjllNDJi ZmUwN2MwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD EyhlZThhMWY1ZTA0YjBmNzk0NjY0Y2JmN2E5ZjY5YTU2NTVkOTlhYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYR2RU7rkxTZ/N4MIktdGs0ZfRwI MD1ZPP6XziKrrKd+EdMhnaSmA+m68wBFKjW5iKomcrUmRSfFYCpv3DGAH9URutAc SeJVfesEjkPvzJipdp/9zjwzLADDXYOJVLEowyAYqvUwmqa1guGEQNDlgbbxPGcF 0ssV7GVG/Xv+fiKuH24RZymK286+AKDiYE/p5BRyCLsQKGXDbZ8b4juBK8ci4Bs8 mV3xDzFpjRhh3L+n+tS1pxcCZ+vCEh4KeYoeTvFB0g/T3NrPJCouLOm4YsHsTrwz /pPbPtFu4+M1x3lRpfXOB6JwklZDR3e8bz2NcZVNPD1xL+aVSdN+r1pd5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6KH14EsPeUZky/ep9ppWVdmaq+MB8GA1UdIwQY MBaAFANhv9RQ4S6ZVASkTrN6L55Cv+B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTct NzM3MWI3ZDFhMTA3LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTctNzM3MWI3ZDFhMTA3 LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfDaGyKB U/a8Xg8ex/LWbRvFrOQtBq6p7HkWxMwdRF01BEl+AithgU+aXlVn3tCLQXPigMCt wcoJ1B1o0K9xEXfgsENWhnQJ1HCbwevqsxeDJvGyAeUaHGIidN6+Dq0jJ+0KDGBH mfN0/uGHa8dSKzEbCgFGPX38Ljpox7USEt+yYVrJKtcIw+BlPV35Qh9xy3iTEE10 S4rLNV9UHAKQzmOLNfF06ymt+ff0dympKpEEMhMXO7rvD85ixSd502+aex1GAhbF OW7ZiCckHVuUA7X22zME523ZmLasfcuq6viaiB8rAsTYHcsT2SnY1N27dbOQY75G eGKLFjtc6RR4XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:59 2026 by rpki-client